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Abstract. This paper introduces a new kind of propositional encoding 
for reasoning about partial orders. The symbols in an unspecified partial 
order are viewed as variables which take integer values and are inter¬ 
preted as indices in the order. For a partial order statement on n symbols 
each index is represented in [logj n] propositional variables and partial 
order constraints between symbols are modeled on the bit representa¬ 
tions. We illustrate the application of our approach to determine LPO 
termination for term rewrite systems. Experimental results are unequivo¬ 
cal, indicating orders of magnitude speedups in comparison with current 
implementations for LPO termination. The proposed encoding is general 
and relevant to other applications which involve propositional reasoning 
about partial orders. 


1 Introduction 

This paper formalizes a propositional logic over partial orders. Formulae in 
this logic are just like usual propositional formulae except that propositions 
are statements about a partial order on a finite set of symbols. For example, 
if = 9) ^ ((/ > h) W {h > gj) is a formula in this logic. We refer to the for¬ 
mulae of this logic as partial order constraints. There are many applications in 
computer science which involve reasoning about (the satisfiability of) partial or¬ 
der constraints. For example, in the contexts of termination analysis, theorem 
proving, and planning. The main contribution of this paper is a new kind of 
propositional encoding of partial order constraints in propositional logic. 

Contemporary propositional encodings, such as the one considered in ca, 
model the atoms (primitive order relations such as / = g or / > /i on symbols) in 
a partial order constraint as propositional variables. Then, propositional state¬ 
ments are added to encode the axioms of partial orders which the atoms are 
subject to. For a partial order constraint on n symbols, such encodings typically 
introduce O(n^) propositional variables and involve 0 {n^) clauses to express 
the axioms. In contrast we propose to model the symbols in a partial order con¬ 
straint as integer values (in binary representation). For n symbols this requires 
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k = [log 2 n] propositional variables for each symbol. The integer value of a sym¬ 
bol reflects its index in the partial order. Constraints of the form (/ = g) or 
(/ > h) are then straightforward to encode in A:-bit arithmetic. 

We focus on the application to termination analysis for term rewrite systems 
(for a survey see [7]) and in particular on LPO termination EH. Experimen¬ 
tal results are unequivocal, surpassing the performance of current termination 
analyzers such as TTT nnm and AProVe |9ld| (configured for LPO). The un¬ 
derlying approach is directly applicable to more powerful termination proving 
techniques, such as those based on dependency pairs [2], which basically involve 
the same kind of constraint solving. 

Sections 13 and 121 introduce partial order constraints and the LPO termina¬ 
tion problem. Section 0] describes the 0{n?) atom-based propositional encoding 
of partial order formul® introduced in m for LPO termination. SectionHintro- 
duces our 0(n log n) symbol-based encoding. Section H describes and evaluates 
our implementation for LPO termination which is based on the application of a 
state-of-the-art propositional SAT solver M Finally, we present related work 
and conclusions. 


2 Partial order constraints 

Informally, a partial order constraint is just like a formula in propositional logic 
except that propositions are atoms of the form (/ > g) or (f = g). The semantics 
of a partial order constraint is a set of models. A model is an assignment of 
truth values to atoms which is required to satisfy both parts of the formula: the 
“propositional part” and the “partial order part”. 

SyntaLx: Let T be finite non-empty set of symbols and Tl, = { >, = } consist 
of two binary relation symbols on T . Since TZ is fixed we denote by Atomj^ the 
set of atoms of the form (/ R g) where R G TZ and f,g G T. A partial order 
constraint on is a propositional formula in which the propositions are elements 
of Atomjr. We sometimes write (/ > g) as shorthand for [f > g)y [f = g)- We 
denote the set of atoms occurring in a partial order constraint ip by Atom(ip). 

Semantics: The symbols in TZ are interpreted respectively as a strict partial 
order and as equality (both on J-). Let p he & partial order constraint on T . 
The semantics of is a set of models. Intuitively, a model of v? is a set of atoms 
from Atomjr which satisfies both parts of the formula: the propositional part 
and the partial order part. Before presenting a formal definition we illustrate 
this intuition by example. 

Example 1. Let T = {f,g,h}. The following are partial order constraints: 


= (/ > 5) A ((/ > h)\/ {h> /)) 
^2 = if > g) ^ {g > h) A {h > g) 

V’3 = if > g)A ^{{h > g)V if > h)) 
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The set of atoms m = { (/ > g), (/ > h), (/ = /), {g = g), {h = h)} is a 
model for ipi. It satisfies the propositional part: ipi evaluates to true when as¬ 
signing the atoms in g the value “true”. It satisfies the partial order part: it is a 
partial order. The set of atoms {/i>/,/><?} is not a model (for any partial or¬ 
der constraint) because it is not closed under transitivity (nor reflexivity). How¬ 
ever, its extension ^2 = { (^ > /), if > g), (h > g), if = /), ig = g), ih = h)} is 
a model for ipi. Formula ipi has additional models which are linearizations of /ii: 

M3 = { (/ > g), ig > h), if > h), if = /), ig = g), {h = h)\, 

M4 = { (/ > h), ih > g), if > g), if = /), ig = g), {h = h)] , and 

M5 = { (/ > g), ig = h), ih = g), if > h), if = /), (g = g), ih = h)} 

The formula ip2 has a single model: 

{ if = g), ig = /), ig = ih = g), if = h), ih = /), (/ = /), (5 = g), ih = h)} 

Focusing on (^3 illustrates that there is an additional implicit condition for an 
assignment to satisfy a partial order constraint. We recall that a partial order can 
always be extended to a total order. The partial order /r = { / > g } satisfies the 
propositional part of ips and may appear at first sight to satisfy also the partial 
order part (it is a partial order). However, no extension of ^ to a total order 
satisfies the propositional part of ips and hence p cannot be considered a model 
of ip3. 


The following definition formalizes the semantics for partial order constraints. 

Definition 1 (assignment, model). An assignment p, is a mapping from 
propositions of Atomjr to truth values, and can be identified with the set of 
propositions it assigns “true”. Let (p be a partial order constraint on T. We say 
that an assignment p is a model for ip if: (1) it makes ip true as a propositional 
formula; (2) it satisfies the axioms for strict partial order and equality; and (3) 
it defines a total order on T. More specifically, an assignment p is required to 


(for all f,g,h& 

\T): 






reflexivity: 

if = f)&h 






symmetry: 

{f = g)^h 


{g = f) ^ h 




asymmetry: 

^{{f>g) e 

pA{g> f) G p) 




transitivity: 

if > g) e p 

A 

{g> h) e p 


(/> 

h) 


(/ = 5) e M 

A 

{g = h) G p 


(/ = 

h) 

identity: 

if > g) e p 

A 

{g = h) G p 


(/> 

h) 


{f = g)^h 

A 

{g> h) G p 


(/> 

h) 

comparability: 

{f > g) e p 

V 

(5 > /) e M 

V 

(/ = 

g) 


Given that each model of a partial order constraint is a total order, we have 
that -.(/ > 5) = (5 > /) V (5 = /) and that -.(/ = g) = (/ > 5) V (5 > /). 
Hence we may assume without loss of generality that partial order constraints 
are negation free. For example, the formula from Example ^ is equivalent to 
^3 = if > g) ^ {g ^ h) A {h > f) which is clearly unsatisfiable. 
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= {{gt > ge) V (- > ge)) A {{ge > gt) V (- > gt)) A 
((+ > *) A (+ > -) V (- > *)) A 
((* > +) A (4= > -) V (- > +)) A (* > +) 



Fig. 1. A partial order constraint (left) and its domain graph (right). The graph 
has two strongly connected components: {gt,ge] and { — ,=!=,+}. Arcs between 
the components are dashed. 



Satisfiability: In this paper we are concerned with the question of satisfiability 
of partial order constraints: given a partial order constraint (/? does it have a 
model? Similarly to the general SAT problem, the satisfiability of partial order 
constraints is NP-complete, and the reduction from SAT is straightforward. 

The atoms in a formula ip induce a graph G^p on the symbols in T such 
that satisfiability of ip is equivalent to that of its individual (strongly connected) 
components. This graph captures all possible cycles in the partial order and 
hence all potential contradictions. The following definition is inspired by m 

Definition 2 (domain graph). Let ip he a (negation free) partial order con¬ 
straint on T. The domain graph = (V) E) is a directed graph with vertices 
V = E and edges E = { (/, 5) | { (/ > 5), (/ = 5), (5 = /) } n Atom{ip) 7 ^ 0 } . 

Figure n illustrates a partial order constraint (a) and its domain graph (b). 
The following definition and lemma facilitate the decomposition of a test for 
satisfiability to a set of smaller instances. 

Definition 3 (restricting a partial order constraint). Let ip he a partial 
order constraint on T and let F E. The restriction of ip to the symbols in 

F is the formula obtained by substituting “true” for any atom (/ R g) such 

that {f,g) ^ F X F. The SCC-partition of ip is the set of graphs obtained by 
restricting ip to the nodes in each of the strongly connected components of G^. 

Example 2 . Consider the partial order constraint ip and its domain graph G^ 
depicted as Figure Q The graph G^ has two strongly connected components. 
The SCC-partition for ip gives: 

ipi = {{gt > ge) V true) A {{ge > gt) V true) = true 

ip2 = (* > “b) A (((-b > *) A (“b > —)) V (— > *)) A (((* > -b) A 

{* > -)) V (- > -b)) = (=1= > -b) A (- > *) A (- > -b) 

Lemma 1. A partial order constraint is satisfiable if and only if each of the 
formula in its SCC-partition is satisfiable. 

Proof. You can only get a contradiction if a; > a; along some path in the graph. 
Any such path will be contained in a single SCC. 
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-gt{A,B) ge{B,A) 
-ge{A,B) gt{B,A) 
-{A + B) ^ {-A)*{-B) 


-(A*B)^{-A) + {-B) 

A* {A + B) ^ {A* B) + {A*C) 
{B + C) * A ^ {B * A) + lc * A) 


Fig. 2. An example term rewrite system: normalizing formulae with proposi¬ 
tional connectives: (representing: and, or, not); and partial orders: gt, ge 

(representing: >,>). 


3 LPO termination 


A term rewrite system is a set of rules of the form £ —^ r where £ and r are terms 
constructed from given sets of symbols J- and variables V, and such that r only 
contains variables also in £. A rule £ ^ r applies to a term t if a subterm s of 
t matches i with some substitution a (namely, s = £a). The rule is applied by 
replacing the subterm s by rtr. Such an application is called a rewrite step on t. 
A derivation is a sequence of rewrite steps. A term rewrite system is said to be 
terminating if all of its derivations are finite. An example term rewrite system 
is depicted as Figure El 

Termination of term rewrite systems is undecidable. However a term rewrite 
system terminates if there is a reduction ordering such that £ )^ r for each rule 
£ —> r in the system. There are many methods for defining such orderings. Many 
of them are based on so-called simplification orderings and one such ordering is 
the lexicographic path ordering (LPO) EEl. In this setting a partial order 
(strict or non-strict) on J- induces a corresponding (strict) partial order >ipo on 
terms. If for each of the rules £ — > r in a system, £ >ipo r then the system is 
LPO terminating. 


Definition 4 (Ipo). Let >jr be a partial order (strict or non-strict) on J-. The 
induced lexicographic path ordering on terms constructed from symbols of J- and 
variables from V is defined recursively as follows: 


s = /(si,..., Sn) >ipo t if and only if either: 

1 . t = gfti,... ,tm) and s >ipo tj, for all 1 < j < m, and either 
(a) f g, or (b) f = g and (si,...,s„) {ti,...,tm); or 


{Si « t) 


V {si >ipo t) for some 1 < i < n. 


where is the lexicographic order on tuples of terms with respect to the or¬ 
dering >ipo: 


{si,. . . ,Sn) >lTo (h, ■ ■ ■ ,tm) n>0A 


m = 0 V m > 0 A 


^ Ipo ti V 

(|5l ~ti |A (S2,...,5n} >1“ (t2,...,tm)) 


The LPO termination problem is to determine for a given term rewrite sys¬ 
tem T with function symbols if there exists a partial order >jf such that 
£ >ipo r for each of the rules £ ^ r G T with the induced lexicographic path 
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ordering. There are two variants of the problem: “strict-” and “quasi-LPO ter¬ 
mination” depending on if we require >jf to be strict or not. The corresponding 
decision problems, strict- and quasi- LPO termination, are decidable and NP 
complete ini These problems are tantamount to testing corresponding partial 
order constraints for satisfiability IM . In Definition^ if >;r is a strict order 
then the boxed equivalences Si ^ t and si « ti are syntactic identity; and if >jr 
is non-strict, then they are an equivalence on terms: two terms are equivalent if 
they are the same up to equivalent function symbols. 

For given terms s and t the recursion in Definition ^ for s >ipo t unfolds 
to a partial order constraint on the symbols in s and t, with details depending 
on whether >y is a strict or non-strict partial order. The strict- and quasi- 
LPO termination problems are to deciding if conjunctions of these unfoldings 
are satisfiable — one conjunct for each rule in the given term rewrite system. 

Example 3. Consider the term rewrite system of FigureEl Unfolding Definition^] 
for strict-LPO termination, we obtain the following: 

-{gt{A,B)) >ipo ge{B,A) {gt > ge) V (- > ge) 

-{ge{A,B)) >ipo gt{B,A) {ge > gt) V (- > gt) 

-{A + B) >ipo (-(A)) >1= (-(B)) <;=^ {+> *)A ((-k > -) A (-k > -)) V (- > *) 

— {A * B) >ipo (—(T)) -k (—(B)) (>1= > -k) A ((>1= > — ) A (* > —)) V (— > -k) 

A * (B -k C) >ipo {A * B) + {A * C) ’)<>-k 

(B -k C) * T >ipo {B * A) + {C * A) <=> > -k 

The term rewrite system is LPO terminating if and only if the conjunction of 
the constraints on the right sides is satisfiable. This conjunction is precisely the 
partial order constraint (p from Figure ^ which by Lemma ^ (p is satisfiable if 
and only if the formula in its SCC-partition are. Coming back to Example [3 it 
is straightforward to observe that they are. 

The next example illustrates a term rewrite system which is quasi-LPO ter¬ 
minating but not strict-LPO terminating. 

Example 4- Consider the following term rewrite system. 

div{X,e) i{X) 
i{div{X,Y)) div{Y,X) 
div{div{X,Y),Z) div{Y,div{i{X),Z)) 

Unfolding Definition 0] for strict-LPO gives 

div{X,e) >ipo iiX) div > i 
i{div{X,Y)) >ipo div{Y,X) i > div 
div{div{X,Y), Z) >ipo div{Y,div(i(X), Z)) div > i 

The conjunction of the constraints on the right sides is not satisfiable indicating 
that there does not exist any strict partial order on T such that the corresponding 
lexicographic path order decreases on the three rules. The system is however 
quasi-LPO terminating. Unfolding Definition 0] for quasi-LPO gives a satisfiable 
partial order constraint equivalent to {div > i) A {i > div). which indicates that 
taking div = i provides a proof of quasi-LPO termination. 
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4 An Atom-based propositional encoding 


The basic strategy is to encode a partial order constraint Lp or^J- hy an equivalent 
propositional formula ip' such that each model of ip corresponds to a model of 
ip' and in particular such that p is satisfiable if and only if p' is. The idea 
of mapping strict LPO termination problems to a corresponding propositional 
formula is addressed also in where the authors assume that partial order 
constraints contain only disjunction and conjunction of atoms of the form (/ > g) 
(no equality and no negation). This suffices for strict-LPO termination analysis. 
The presentation in this section is more general and can be applied also for 
quasi-LPO termination. 

An atom-based propositional encoding for a partial order constraint p is 
obtained by: (a) viewing the atoms in p as propositional variables, and (b) 
making the axioms for partial order explicit. We let |a] denote the propositional 
variable corresponding to an atom a C Atomjr and |(/3] denote the propositional 
formula obtained by replacing each atom a in partial order constraint p by the 
propositional variable |a]. For a set of symbols T the following propositional 
formulae make the axioms explicit: 


A If = fl 

fdT 

K -([f > g] A Ig > f]) 

f.gST 

[f=g]A[g = h]^If=h] 

f,g,h G 
f^g¥^hpf 

1%^ l\ [f = g] A [g > h] ^ [f > h] 
f,g,h G 
f^g¥^hpf 


- A [f = g] ^ [g = f] 

- T> [f > g] A [g > h] [f > hi 

f,g,h G 
f^g^hpf 

- [f > g] a [g = h] ^ [f > h] 

f^gy^h 

- C'l = A [f > g] V [g > f] V [f = g] 

f,geJ^ 

fy^g^hpf 


The atom-based propositional encoding of a partial order constraint p on 
symbols J- which does not involve equality nor negation is obtained as encode{p) = 
|(^] A A [H]. In the general case when p may contain also negation or 
equality the encoding is obtained as 


encode{p) = |:p] A Rjr A Sjr A Ajy A A A A^ A A A (1) 


Theorem 1. A partial order constraint p on symbols T is satisfiable if and only 
if its atom-based propositional encoding encode{p) is. 


Proof. Straightforward. 


The two variants of atom-based propositional encodings both result in large 
propositional formula. For the case when \tF\ = n they introduce 0{n‘^) propo¬ 
sitional variables and involve O(n^) clauses (e.g., for transitivity). 

In |12| Kurihara and Kondo propose two optimizations. They note that for 
a given formula p, the domain graph G^p is often sparse and hence they propose 
to specialize the explicit representation of the axioms for those symbols from 
IF actually occurring in p. However, in view of Lemma ^ we may assume that 
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we are testing satisfiability for partial order constraints which have strongly 
connected domain graphs. Moreover, as indicated by our experimental evaluation 
in Section El the domain graphs for some of the more challenging examples 
strongly connected components with up to 30 symbols. Under this assumption, 
the proposed optimization will still require O(n^) propositional variables and 
O(n^) clauses. 

In a second optimization Kurihara and Kondo observe that the axioms for 
transitivity and asymmetry can be replaced by a simpler axiom (they call it A*) 
introducing a single clause of the form ^((/i > / 2 ) A (/2 > fz)f\- ■ ■/\{fk-i > fk)^ 
{fk > fi) for each simple cycle (/i > / 2 ), (/2 > /a),. •., (fk-i > fk), (fk > fi) in 
Gip to assert that that cycle is not present in a model. They claim correctness of 
the encoding and report considerable speedups when it is applied. The problem 
with this optimization is that in general there may be an exponential number of 
simple cycles to consider. 

The atom-based encoding described in this section either requires 0{v?) 
propositional variables and introduces 0 {n^) clauses or else relies on a poten¬ 
tially exponential phase of processing the simple loops in the domain graph. 

5 A Symbol-based propositional encoding 

This section presents an alternative propositional encoding which follows the 
same general strategy as before: It encodes a partial order constraint by an 
equivalent propositional formula which in particular has the same satisfiability. 
The novelty is in symbol-based approach. The basic idea is to interpret the n 
symbols in J- as indices in a partial order taking finite domain values from the 
set { 1,..., n }. Each symbol is thus modeled using k = [fog 2 n] propositional 
variables which encode the binary representation of its value. Constraints of the 
form (/ > g) or (/ = g) on IF are interpreted as constraints on indices and it is 
straightforward to encode them in /c-bit arithmetic. 

Let (phe a, partial order constraint on T and let \J- \ = n. An integer solution 
of ip is an assignment 9 of the symbols in T to values in {1..., n} which makes 
p true. 

Example 5. Consider again the partial order constraints from Example Q The 
assignments mapping {f,g,h) to (3,1,2), (3,1,1) and (1,1,1) are solutions for 
P 2 - But only the first is a solution for pi. The formula ps has no solutions. 

In the index based approach the semantics of a partial order constraint is a 
set of integer solutions. 

Lemma 2. Let 9 be a solution of p. The assignment 

Rg)\{f,g}€E, R€TZ, {9{f) R 9{g)) } 

is a model of p. 

Proof Clearly p satisfies both the propositional and partial order parts of p since 
the integer relation > is a total order. Hence /r is a model for p by definition. 
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Lemma 3. Let ^ be a model of ip on T with n symbols. Then there exists a 
solution 6 of ip in { 1 ,..., n } . 

Proof. Assume J- = and let /r be a model of ip. By asymmetry, 

identity and comparability, for each 1 < t < j < n exactly one of fi > fj or /j = 
fj or fj > fi hold. We can linearize the symbols in tF: fk„ Rn-i • • ■ R2 /fca /fei 
where for each 1 < i < n, {fki+i Ri /fei) S M ^tnd Ri G {>,=}. Since fi models 
transitivity, symmetry, and identity. We can then construct a solution 0, using 
values from 1 to no more than n, where 


OifkJ = 1 

d{fki+,) = 


0 {fkj) where Rj-i = (=) 
S{fkj) + 1 where Rj-i = (>) 


for 1 < j < u 


Note that there can be more than one solution corresponding to the same 
model of ip depending on how the symbols in T are linearized. The model /is = 
{/ > 5 . / > 5 = ^ = 5 , / = /> 5 = ^ corresponds to both 0 i = {/ 1 -^ 

2 , 51 —» \,h^ 1 } and 62 = {f ^ ^ 2 ,h^ 2 }. 

The following theorem is a direct consequence of Lemmata |21 and 01 


Theorem 2. A partial order constraint ip has a solution iff it has a model. 

We now introduce a symbol-based propositional encoding for partial order 
constraints. For \P\ = n we need k = [logn] bits per symbol. Recall that |a] is 
the propositional variable corresponding to an atom a and |(^] the propositional 
formula obtained when replacing atoms by propositional variables in partial 
order constraint ip. 

1. For f G tF, the fc-bit representation is / = {fk,...,fi) with fk the most 
significant bit. 

2. A constraint of the form (/ = g) is encoded in fc-bits by 

k 

IK/= 5)life = /\{h ^ 9 i)- 

A constraint of the form (/ > g) is encoded in A:-bits by 


IK/ > 5)llfe 


(/i A -^gi) 

{fk A -^gk) V {{fk 


k = 1 

5fe) A IK/> 5)||fe-i) k>l 


3. A partial order constraint ip is encoded in k bits by 

ll‘^llfe = MA /\ (M ^ ||a|K) (2) 

a^Atoms{(p) 


Proposition 1. The size of the constraint based encoding of ip is 0(|(/?|logn). 
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Let us compare the two encodings of a partial order constraint ip given as 
Equations o and ©• The common part in both encodings is the subformula 
|(/3] in which atoms are viewed as propositional variables. The difference is that 
Equation o introduces explicit axioms to relate the atoms in a partial order 
where Equation © interprets the n symbols as indices represented in [log 2 ri\- 
bits. The symbol-based encoding introduces O(nlogn) propositional variables 
and involves 0{s logn) clauses where s is the size of ip. In comparison the atom- 
based encoding introduces 0 {n?') variables and results in a formula with Oin^) 
clauses. The key improvement is that the expensive encoding of the axioms is 
not required because the encoding as integers ensures that they hold “for free”. 


6 Implementation and Experimentation 

We have implemented a prototype analyzer, poSAT, for strict- and quasi- LPO 
termination based on the encoding proposed in Sectional The implementation 
is a written primarily in SWI-Prolog mm and interfaces the MiniSat solver 
|5in| for solving SAT instances. We have integrated MiniSat and SWI-Prolog 
through wl90 lines of C-code and «140 lines of Prolog code. 

The rest of poSAT is implemented in «700 lines of Prolog code. This includes 
a TRS parser, modules to translate strict- and quasi- LPO termination problems 
into partial order constraints, the module converting partial order constraints 
into SAT instances, and hnally a head module processing the command line, 
running the components, pretty-printing the results etc. The current implemen¬ 
tation does not decompose partial order constraints to their SCC-components 
(Lemma ^. The experimental results indicate that the implementation would 
not benefit from that: (a) Most of the tests are very fast without this decomposi¬ 
tion; and (b) It is typical for hard cases of LPO termination (see Table|21) to have 
a large strongly connected component including the majority of the symbols. 

For experimentation we have taken all 751 term rewrite systems from the 
Termination Problem Data Base which do not specify a “theory” or a “strat¬ 
egy” . In the following, the names of term rewrite systems are indicated in type¬ 
writer font and can be found in ini We report on the comparison of poSAT 
for both strict- and quasi-LPO termination analysis with the TTT analyzer |18|. 
We have also performed comparisons with AProVe |3] as well as with the results 
reported in m 

For the experiments, poSAT runs on a 1.5GHz laptop running GNU/Linux 
FG4. The TTT analyzer is applied via its Web interface m and runs on a 
Xeon 2.24GHz dual-CPU platform which is a considerably faster machine than 
ours. Experiments with AProVe running on our local platform give results which 
are consistently slower than TTT (on its faster machine). Hence for comparison 
with poSAT we provide the numbers only for TTT. Comparison with the results 
of 221 are also not presented as they too are substantially slower than those 
obtained with TTT. 

With regards to precision, as expected, all three analyzers give the same re¬ 
sults (with the exception of a single test which TTT cannot handle within the 
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poSAT 

TTT 

Total 

9.112 

302.35 

Average 

0.012 

0.40 

Max 

0.450 

254.47 



poSAT 

TTT 

Total 

Average 

Max 

10.428 

0.014 

1.169 

2167.44 

2.89 

600.00 


(a) strict LPO termination (b) quasi LPO termination 

Table 1. Summary of experimental results: total, average and maximum times 
(sec) for 751 tests. 


maximum timeout allocation). From the 751 example systems, 128 are LPO ter¬ 
minating and 132 are quasi LPO terminating. For poSAT, run times include the 
complete cycle of processing each test: reading and parsing the file, translation 
to partial order constraints and then to propositional formula, solving by the 
SAT solver and printing the results. The run time of each test is computed as 
an average of ten identical runs. 

Table n^a) summarizes the results for strict LPO termination analysis. The 
columns contain times (in seconds) for our analyzer (poSAT) and TTT. We con¬ 
figure TTT to run with timeout of 10 minutes, the maximum allowed by its Web 
interface. Note that the times are taken on different machines which makes the 
precise comparison impossible. Nevertheless, the results are indicative showing 
that poSAT is fast in absolute terms and scales better for hard cases. Notably, 
the hardest test of LPO termination for poSAT (HM/t005 .trs) completes in un¬ 
der a half second, while the hardest test for TTT (currying/Ste92/hydra. trs) 
takes more than 4 minutes. 

Table db) presents the results for quasi LPO termination analysis. For this 
variant, poSAT completes the 751 tests in 10.43sec. The same task takes TTT 
over 36 minutes with one test (currying/Ste92/hydra.trs) running out of 10 
minutes timeout. The next hardest test for TTT is currying/AG01_No_3.13. trs 
which completes in 203.9sec (3.4min). The same two tests take poSAT O.Olsec 
and 0.031sec respectively. The hardest quasi LPO test for poSAT’s is Zantema/z30 
which takes 1.17sec in our analyzer and 5.03sec in TTT. 

Once again, the timings are indicative despite the fact that the two analyzers 
run on different machines. By comparing the results in Table da) and (b) we 
observe that for quasi LPO, TTT runs about an order of magnitude slower than 
for strict LPO. In contrast, poSAT demonstrates only a modest 14% increase in 
the accumulated run time. 

Table H presents a detailed analysis for the 25 most challenging examples 
for poSAT chosen by maximum total time for strict- and quasi- LPO analysis. 
The two parts of the table present the respective results for strict- and quasi- 
LPO termination analyses. The following information is provided: The columns 
labeled “Sym” and “CNF” characterize the partial order constraints derived 
from the given term rewrite systems. “Sym” indicates the number of symbols 
in the complete formula and in the largest component of its SCC-partition (0/0 
in this column means that the partial order constraint is trivial i.e., true or 
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LPO 

quasi-LPO 

Test 

Sym 

GNF 

poSAT 

TTT 

Sym 

CNF 

poSAT 

TTT 

AProVE / AAECC-ring 

28/10 

642/2479 

0.089 

0.04 

28/24 

786/3118 

0.110 

0.35 

Cime/mucrll 

0/0 

0/1 

0.294 

2.51 

0/0 

0/1 

0.236 

19.85 

currying/AG01_No_3.13 

0/0 

0/1 

0.127 

0.01 

0/0 

0/1 

0.031 

203.92 

currying/Ste92/hydra 

8/4 

102/337 

0.020 

254.5 

8/6 

1156/3570 

0.103 

OO 

HM/t005 

0/0 

0/1 

0.450 

0.05 

0/0 

0/1 

0.038 

2.22 

HM/t009 

19/11 

773/3139 

0.161 

0.00 

19/17 

1388/5677 

0.209 

0.15 

/Exl_2_AEL03.C 

19/17 

630/2506 

0.113 

0.00 

19/19 

1286/5416 

0.169 

95.00 

/Exl_2_AEL03_GM 

22/17 

506/1921 

0.062 

0.00 

22/22 

693/2707 

0.069 

19.37 

/Ex26_Luc03b_C 

15/12 

384/1450 

0.061 

0.02 

15/15 

816/3260 

0.099 

6.21 

/Ex2_Luc02a_C 

15/12 

390/1477 

0.062 

0.10 

15/15 

838/3360 

0.097 

6.03 

/Ex4_7.37^or03.C 

13/11 

287/1057 

0.062 

0.04 

13/12 

577/2317 

0.081 

0.82 

/Ex5_7_Luc97_C 

18/15 

614/2413 

0.098 

0.01 

18/18 

1341/5533 

0.173 

94.90 

/Ex5_7_Luc97_GM 

22/19 

499/1876 

0.056 

0.01 

22/20 

752/2947 

0.074 

19.29 

/Ex6_15.AEL02_G 

23/22 

906/3658 

0.159 

0.01 

23/23 

1862/7717 

0.272 

126.02 

/Ex6.15.AEL02_FR 

26/20 

599/2284 

0.072 

0.01 

26/26 

867/3430 

0.080 

10.00 

/Ex6_15_AEL02_GM 

29/25 

745/2929 

0.085 

0.03 

29/29 

1074/4297 

0.105 

157.86 

/Ex6_15.AEL02_Z 

26/20 

587/2236 

0.061 

0.00 

26/26 

869/3460 

0.078 

18.24 

/Ex7.BLR02_C 

14/11 

299/1108 

0.048 

0.05 

14/14 

627/2546 

0.073 

1.67 

/Ex9.BLR02_C 

12/9 

296/1087 

0.054 

0.28 

12/10 

608/2390 

0.069 

0.35 

/ExAppendixB_AEL03_G 

20/18 

700/2809 

0.134 

0.00 

20/20 

1410/5920 

0.212 

113.12 

/ExIntrod_GM99_G 

16/13 

423/1591 

0.084 

0.00 

16/14 

848/3416 

0.105 

21.69 

/ExIntrod_Zan97_C 

15/12 

344/1285 

0.057 

0.01 

15/15 

709/2862 

0.081 

2.04 

/ExSecll_l_Luc02a_C 

16/13 

439/1666 

0.069 

0.00 

16/16 

985/3914 

0.121 

29.38 

Zantema/zOl 

2/2 

84/247 

0.028 

0.01 

3/3 

2439/7315 

0.198 

0.12 

Zantema/z30 

2/2 

65/190 

0.119 

0.01 

3/2 

12827/38479 

1.169 

5.03 


Table 2. The 25 hardest tests for poSAT 


false). “CNF” indicates the numbers of propositional variables and clauses in the 
translation of the propositional (symbol-based) encoding to conjunctive normal 
form. The columns labeled “poSAT” and “TTT” indicate run times (in seconds) 
for the poSAT and TTT solvers. 

All of the tests except for currying/Ste92/hydra.trs are not strict- nor 
quasi-LPO terminating. This is not surprising for the 25 hardest tests, as proving 
unsatisfiability is harder than finding a solution for a satisfiable formula. It is 
interesting to note that three examples among the hardest 25, result in trivial 
partial order constraints. Obviously, the challenge in these examples is not in 
solving the constraints but rather in obtaining them by unfolding Definitional 
Interestingly, our translation and simplification mechanisms are sometimes more 
powerful than those of TTT. For instance, currying/AG01_No_3.13 is simplified 
to false in poSAT but not in TTT, leading to a long search for TTT. The 
difference is due to the fact that in the case of poSAT the generation of a partial 
order formula never introduces trivial sub-formula (“true” or “false”). these are 
evaluated on-the-fly. 
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Another observation based on the results of Table |21 is that the partial or¬ 
der constraints derived from the tests typically have domain graphs with large 
strongly-connected components. Almost every test in the table has a “core” com¬ 
ponent including the majority of the symbols. Therefore, it is unlikely that the 
performance of poSAT for the presented tests can be improved by using the 
SCC-based decomposition of the formula. Large components of this size would 
also pose a serious challenge to an analyzer based on the atom-based encoding. 

As Table 121 shows, the maximum CNF instance solved in our tests includes 
12827 propositional variables and 38479 CNF clauses. This is well below the ca¬ 
pacity limits of MiniSat, which is reported to handle benchmarks with hundreds 
of thousands of variables and clauses m 

7 Related and Future Works 

Testing for satisfiability of partial order constraints comes up in many other 
applications. First of all in the context of term rewrite systems where LPO is 
just one example of a simplification ordering and analyses based on other types of 
orderings may also be encoded into propositional logic. Moreover, for programs 
which cannot be shown to terminate using these kinds of simplification orderings, 
the dependency pairs approach m has proven very successful in generating sets 
of constraints such that the existence of a (quasi-)ordering satisfying them is a 
sufficient condition for termination. Our constraint solving technique is directly 
applicable and will improve considerably the performance of implementations 
for these techniques. 

Another approach to proving termination is based on the notion of size 
change graphs CSl which approximate the transition relation induced by a pro¬ 
gram. A transition step from program point p/n (with n state variables) to 
program point q/m (with m state variables) is described by a graph with nodes 
{ Pi,..., } and { gi,..., (7m } and an edge from pi to qj to indicate that the 

size of the state variable at point p decreases (strict or non-strict) on the tran¬ 
sition with respect to the state variable at point q. Size change graphs can be 
represented as conjunctions of constraints of the form {pi > qj) or {pi > qj) (see 
for example |S]). Sets of size change graphs can be represented as disjunctions 
of conjunctions of such constraints and encoded as propositional formula using 
using log(n + m) bits. The results in ^ illustrate how such an encoding can be 
exploited to provide for efficient implementations manipulating potentially large 
sets of size change graphs. 

8 Conclusion 

We have introduced a new kind of propositional encoding for reasoning about 
partial orders. Previous works propose to represent the atoms in a formula as 
propositional variables and to explicitly encode the axioms for partial order. 
Our novel approach is to interpret the symbols in a formula as finite domain 
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variables corresponding to the indices in the partial order. We illustrate the ap¬ 
plication of our approach for LPO termination analysis for term rewrite systems. 
Experimental results are unequivocal indicating orders of magnitude speedups 
in comparison with current implementations for LPO termination analysis. The 
proposed technique is directly applicable to more powerful termination proving 
techniques, such as those based on dependency pairs [2], which basically involve 
the same kind of constraint solving. 
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